This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File:                     Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier:          rHOX0gENlhmJm3CQF07QA3flNkGo+itNwJBYxoLf2FE=
Subject key identifier:   4B:E0:83:BB:8E:17:0A:44:FA:D7:88:10:43:63:E5:36:4F:E4:9A:7C
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer:       /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial:       019C43FE5E8353EB327CC1B92767B672CC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number:          0D20
Signing time:             Mon 09 Feb 2026 20:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:09 +0000
Files and hashes:         1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
                          2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: Dtbl9dDmAn3+eMlUKXlRgL52IOGuBlCqTqzL0/6gLT4=)
                          3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:5e:83:53:eb:32:7c:c1:b9:27:67:b6:72:cc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
        Validity
            Not Before: Feb  9 20:01:09 2026 GMT
            Not After : Feb 10 20:01:09 2026 GMT
        Subject: CN=4be083bb8e170a44fad788104363e5364fe49a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:be:c0:2b:cf:3f:a7:9e:0c:c3:6e:0e:95:
                    6b:e3:73:50:27:4e:2e:fd:74:34:c3:fd:18:dc:02:
                    9c:cd:e1:e6:59:05:1f:6e:e8:70:21:d4:50:6a:ca:
                    88:6b:0a:da:87:1d:50:97:12:3d:fc:42:53:66:0a:
                    20:60:fe:e3:db:1f:46:f1:66:e5:5c:ca:62:5b:33:
                    f0:fb:fc:3a:86:dd:1c:4a:94:a2:5f:43:ea:4d:8e:
                    2e:d2:f3:53:6a:3f:b1:d2:59:e6:5f:06:9c:d3:2a:
                    21:ba:b7:1a:90:28:68:61:7f:e1:aa:f2:8d:92:51:
                    cb:19:f1:86:f9:10:06:bc:58:1d:aa:b5:82:66:62:
                    22:1a:74:00:2d:13:68:dd:a0:9e:c6:12:e0:10:82:
                    15:eb:df:90:88:dd:05:6d:47:c9:70:7d:e3:4c:ea:
                    a2:35:12:5d:87:91:aa:89:fd:87:7b:10:bd:86:fa:
                    43:66:70:fb:ee:c0:72:b7:b8:ee:48:e8:e7:6d:a5:
                    c6:1e:aa:5f:b5:3b:b0:20:ed:7e:0b:6d:25:43:83:
                    80:ce:be:d8:12:80:ad:25:92:1b:d1:60:ef:af:c1:
                    71:5d:a3:02:ed:64:83:7e:8d:99:ab:1d:0a:97:96:
                    a0:c4:91:4e:88:06:62:74:f5:ef:8d:b8:2e:b0:8e:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E0:83:BB:8E:17:0A:44:FA:D7:88:10:43:63:E5:36:4F:E4:9A:7C
            X509v3 Authority Key Identifier:
                keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:c3:3f:8a:11:f7:69:df:6b:eb:f2:b6:56:de:cd:87:3b:
         c7:8c:99:13:2b:97:5c:1c:c1:b4:b7:2a:92:cc:31:40:dd:0b:
         88:7c:08:90:02:77:5e:8b:4a:5c:8c:f5:66:2c:90:32:cc:f4:
         53:0e:fe:67:13:50:71:b1:3e:bd:0a:4d:d8:3e:45:64:d2:67:
         1b:c5:c3:8b:6c:94:b5:79:23:4f:d8:24:99:13:44:2d:2a:23:
         e1:af:85:8e:3d:14:95:89:f3:92:d9:c9:84:a8:f2:a5:9d:06:
         76:b4:ac:8c:a9:db:9d:f5:03:06:a9:63:83:18:bd:75:4f:4e:
         47:64:4c:05:53:ac:58:08:2f:81:e4:ee:aa:1b:7b:b8:d1:f9:
         48:64:1f:ef:82:f2:88:80:b7:f2:9b:d3:40:59:05:2b:e3:b8:
         11:8c:c5:98:1d:0e:9b:af:5f:13:cf:af:db:46:b1:a1:b2:4f:
         d1:c7:8e:8f:38:fb:bc:a1:d9:fd:83:a8:72:0a:4f:28:80:b5:
         bd:4e:18:44:4d:8f:b9:41:f7:10:0c:b9:35:ba:26:2c:2f:6b:
         73:9a:44:2d:bc:48:33:47:46:2f:6d:e6:b1:22:b9:70:e0:bd:
         57:b9:17:31:80:bf:6f:16:24:e3:7e:cc:cd:5b:ae:c0:9f:e6:
         8c:6b:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:38 2026 by rpki-client